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SEMAT MEETS TO 
DEFINE SOFTWARE 
ENGINEERING 
METHODSJHEORY 

BY DAVID RUBINSTEIN 

The year was 1905. An unknown 
(but not for long) patent clerk 
named Albert Einstein wrote a 
series of papers, including the 
particle theory of light and his 
famed theory of relativity that 
marked a revolution in physics. 
His work challenged the beliefs 
of scientists of that era, and a 
period of debate and argument 
ensued as physics theory was 
turned upside-down. 

So in 1911, Belgian industrial- 
ist Ernest Solvay established in 
Brussels the first world physics 
conference, with the goal of 
defining the core tenets of theo- 
retical physics that could be uni- 
versally taught and used. 

Today, a handful of notables 
in the software engineering are- 
na are working toward the same 
goal: unambiguously defining the 
universals that underlie all devel- 
opment methodologies. 

The effort, called Software 
Engineering Method and Theory 
(SEMAT), is being spearheaded 
by Richard Soley, chairman of 
the consortium Object Manage- 
ment Group; Ivar Jacobson, co- 
creator of UML and the Rational 
Unified Process, among other 
work; and Bertrand Meyer, who 
created the Eiffel programming 
language and is an acknowledged 
expert in object-oriented pro- 
continued on page 18 ► 



Salesforce and VMware unite 
to push Java into the cloud 



BY ALEX HANDY 

SAN FRANCISCO — Salesforce 
and VMware are turning cloud 
computing into a Java runtime 
environment. The companies 
announced in late April a part- 
nership that is intended to use 
the Spring framework to enable a 
Java cloud. The system will run 
on top of VMware s vSphere vir- 
tualization infrastructure and will 
be hosted at Salesforce.com. 

The new hosted service will be 
called VM force, and according to 
the companies, will be able to 



host any Java application that can 
be built to utilize Salesforce's 
databases. 

According to Mark Benioff, 
CEO of Salesforce, Java develop- 
ers currently lack a simple path to 
cloud deployment. "There are 
over 6 million developers who 
know Java," he said. "It has trans- 
formed this industry and brought 
enterprises onto the Internet. 
But enterprise Java developers 
don't have a clear path into the 
cloud. Can they deliver these 
continued on page 16 ► 
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Salesforce.com CEO Mark Benioff and VMware CEO Paul Maritz announced a 
new partnership aimed at pushing Java developers into the clouds. 



Ads in applications: 
The time has come 



BY KATIE SERIGNESE 

Ads in applications have come a 
long way in the past decade. 
They have evolved from bland, 
static pictures of products that 
someone would probably find in 
a thrift store today, to interactive 
games, videos and more. It is fair 
to say that time and technology 
have changed a few things. 

In the Feb. 23, 2000, debut 
issue of SD Times, Doug Root, 
then the director of sales and 
marketing for Premia, a software 
tools supplier, said, "Ad-based 
software will be somewhat suc- 
cessful, but it might be compro- 
continued on page 21 ► 
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Banners and other types of ads will 
become more commonplace. 



Weighing in on 
Visual Studio 2010 



BY DAVID WORTHINGTON 

Microsoft just shipped Visual 
Studio 2010, and while it was 
well received, leading .NET pro- 
gramming experts are already 
brainstorming about what fea- 
tures they would like to see come 
next. 

"VS 2010 is a big release — 
more so than 2008," said Larry 
O'Brien, a private consultant and 
author of the "Windows & .NET 
Watch" column for SD Times. 
Visual Studio's new Windows 
Presentation Foundation (WPF) 
interface has made it easier for 



Microsoft to evolve the environ- 
ment and for third parties to 
build plug-ins, he explained. 

Consequently, there will be 
greater uptake of third-party 
solutions such as JetBrains' 
Re Sharper, and potentially more 
point updates to Visual Studio 
than there have been in the past, 
O'Brien predicted. 

Roger Jennings, OakLeaf Sys- 
tems developer and author of 
over 30 books on Windows 
development topics, praised VS 
2010's templates for creating and 
continued on page 12 ► 



IN THIS ISSUE 

Delphi Prism IDE retooled for Visual Studio 2010 . . .5 

Compuware brings Dojo to Uniface 6 

Drupal popularity expands beyond developers 10 

App modernization gets boost from HP 14 

O'BRIEN: Assembly required 28 

BINST0CK: Where will that big data go? 29 

ZEICHICK: OK with ads in apps r if apps are free . . .30 



^^ *l 




>?■ 



Is code escrow for SaaS 
making a comeback? 

page 3 



s 




J 



YouVe got the data, but time, budget and staff constraints can make 
it hard to present that valuable information in a way that will impress. 
With Infragistics' NetAdvantage for Silverlight Data Visualization, 
you can create Web-based data visualizations and dashboard-driven 
applications on Microsoft Silverlight (and coming soon for WPF) that 
will not only impress decision makers, it actually empowers them. Go 
to infragistics.com/sldv today and get inspired to create killer apps. 

Infragistics Sales 800 231 8588 

Infragistics Europe Sales +44 (0) 800 298 9055 

Infragistics India +91-80-6785-1111 

twitter.com/infragistics 



lfflfei@osG[feg 



^ ' u t k- A'-v - . Vj: U 0u6C Z , 



Copyright 1996-2010 Infragistics, Inc. All rights reserved. Infragistics and the Infragistics logo and NetAdvantage are registered trademarks of Infragistics, Inc. 



www.sdtimes.com 



. Software Development Times . May 15, 2010 



NEWS 



Microsoft readying Hadoop 
for use with Windows Azure 



BY DAVID WORTHINGTON 

Microsoft is preparing to pro- 
vide Hadoop, a Java software 
framework for data-intensive 
distributed applications, for 
Windows Azure customers. 

Hadoop offers a massive 
data store upon which develop- 
ers can run map/reduce jobs. It 
also manages clusters and dis- 
tributed file systems. Microsoft 
will provide Hadoop within a 
"few months," said a Microsoft 
executive who wished to remain 
anonymous. 

The technology makes it 
possible for applications to ana- 
lyze petabytes of both struc- 
tured and unstructured data. 
Data is stored in clusters, and 
applications work on it pro- 
grammatically 

"They are probably seeing 
Hadoop adoption trending up, 
and possibly have some large 
customers demanding it," said 
Forrester principal analyst Jef- 
frey Hammond. 

"Microsoft is all about mon- 
ey first; PHP support with IIS 
and the Web PI initiative were 
all about numbers and creating 
platform demand. If Hadoop 
support helps creates platform 
demand for Azure, why not 
support it? Easiest way to lead a 



parade is to find one and get in 
front of it." 

Microsoft's map/reduce solu- 
tion, codenamed "Dryad," is still 
a reference architecture and not 
a production technology. 

Further, AppFabric, a Win- 
dows Azure platform for devel- 
oping composite applications, 
currently lacks support for data 
grids. Microsoft has experi- 
enced difficulty in porting 
Velocity, a distributed in-mem- 
ory application cache platform, 
to Windows Azure, because 
Velocity requires administrative 
privileges to install, the anony- 
mous executive told SD Times. 

"Do they feel so 'way 
behind' that they are rolling out 
a Java-based product without a 
.NET-based 'superior' alterna- 
tive ready to go?" asked Larry 
O'Brien, a private consultant 
and author of the "Windows & 
.NET Watch" column for SD 
Times. "Perhaps they feel that 
distributed map/reduce is not 
really all that important, that 
they can put Hadoop on the 
'check-off box' and it won't be 
embarrassing that it gives Java 
developers a capability that 
.NET developers don't have?" 

The Azure platform is not 
restricted to .NET develop- 



ment. Microsoft partnered with 
Soyatec to produce the Azure 
SDK for Java. However, using 
Hadoop as a data grid solution 
is a departure from Microsoft's 
approach to data access. 

Microsoft's ADO.NET Enti- 
ty Framework provides an 
object-relational mapping tech- 
nology; Hadoop pushes parallel 
data analysis down into the data 
storage layer rather than the 
business logic layer. 

"Map/reduce is definitely 
lower-level than SQL," said 
O'Brien. "However, because it's 
more like a powerful mathe- 
matical technique than a black 
box whose internal workings 
are unclear, it's not necessarily 
'more complex' to think 
through a tough data analysis 
problem in terms of 
map/reduce. Map: 'Farm out all 
of this identical work to a whole 
bunch of different computers.' 
Reduce: 'Gather those results 
and combine duplicates.' Feed 
the reduced dataset into anoth- 
er map/reduction process. Con- 
ceptually, that's pretty easy to 
reason with!" 

Microsoft can gain a data grid 
capability in Azure by acquiring 
a partner such as ScaleOut Soft- 
ware or Alachisoft, said For- 



rester senior analyst Mike 
Gualtieri. Microsoft is not far 
behind other platform players in 
providing distributed data grids 
on the cloud, he added. 

ScaleOut Software uses a 
memory-based approach to 
map/reduce analysis. Its paral- 
lel method invocation inte- 
grates parallel queries with 
map/reduce on object collec- 
tions stored in the grid. 

"In-memory, object-orient- 
ed map/reduce within the busi- 
ness logic layer offers important 
advantages in reducing devel- 
opment time and maximizing 
performance," said William 
Bain, CEO of ScaleOut Soft- 
ware. "Over time, we are confi- 
dent that this approach will effi- 
ciently handle petabyte data 
sets, which currently rely on 
file-based implementations." 

Additionally, there are open- 
source map/reduce solutions 
for .NET A project called 
hadoopdotnet ports Hadoop to 
the .NET platform. It is avail- 
able under the Apache 2.0 
open-source license. MySpace 
Qizmt, a map/reduce frame- 
work built using .NET, is anoth- 
er alternative. It is licensed 
under GNU General Public 
License v3. I 



Is code escrow for SaaS making a comeback? 

Concerns about stability have lessened, and some say it's still useful 



BY ALEX HANDY 

A vibrant software-as-a-service 
marketplace for corporate prod- 
ucts saves time and effort for 
internal development teams, 
but there's no guarantee the 
provider will always be there to 
offer said services. 

When SaaS was a new tech- 
nology, software escrow was a 
popular inclusion in contracts. 
A neutral third party would take 
in the source code and hold it in 
escrow. If things go sour and 
the original software provider 
goes the way of the dodo, the 
customer can then get the soft- 
ware and IP rights from the 
third party. But as one SaaS 
hosting provider said, software 
escrow is no longer fashionable. 

"What's surprising me is that 
this was a fairly hot topic of 
conversation a couple years 
ago, but now I don't hear cus- 
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tomers talking about it any- 
more. We even offered this as 
an option and people didn't 
buy it," said Treb Ryan, CEO 
of hosted software provider 
OpSource. 

He said that escrow hasn't 
been on any of his customers' 
receipts since December 2008. 
He said the reason is a somewhat 
dirty secret for many companies: 
"It's like disaster recovery. Peo- 
ple talk about it to a certain lev- 
el, but nobody ever buys it." 

If a buyer were concerned 
about the stability of a SaaS 



product, Ryan said, they proba- 
bly wouldn't want to use it in 
the first place. 

But when a successful SaaS 
provider is acquired by a larger 
company, the results can also 
cause software or services to 
vanish. 

Jan Aleman, CEO of SaaS 
provider Servoy, said that "if 
you have 100 customers paying 
US$5 a month for the product, 
then you're in a different situa- 
tion. Whoever is cleaning up 
the leftovers may say, This rev- 
enue stream is so low, we'll let it 



collapse and be done with it.'" 
Though the issue of software 
escrow may no longer be a hot 
topic, the potential for a com- 
pany losing its grip on SaaS- 
provided rope is still very real. 

Aleman told of a situation 
one of his customers, Pioneer, 
encountered when it became 
reliant upon a third-party SaaS 
application. "When [the third 
party] went bankrupt, [Pioneer] 
said, 'We'll just pay for the host- 
ing bills until this is sorted out.' 
They then paid a fee to own the 
software. If they had known all 
this was going to happen, they 
would have happily paid for an 
escrow." 

Aleman said that escrow is 
still a useful tool when negotiat- 
ing SaaS contracts. "I think as 
more companies move to SaaS, 
that is going to become a more 
important question," he said. I 




Ivar Jacobson believes in following 
Essential Unified Process. 

EssWork process 
adds role-based 
access for users 

BY DAVID RUBINSTEIN 

Software consultancy Ivar 
Jacobson International released 
in April version 3.0 of its Ess- 
Work platform for disciplined 
software development, which 
includes the company's Essen- 
tial Practices, Essential Unified 
Process and a software develop- 
ment kernel. 

EssWork gives organizations 
guidelines for building software 
efficiently, with the result being a 
successful software project. The 
software captures good develop- 
ment patterns, so they can be 
followed to improve the quality 
of the software produced and of 
the processes employed, accord- 
ing to the company. 

"The aim is to reduce devel- 
opment costs and deliver pro- 
jects predictably and with bet- 
ter quality," said Michael Azoff, 
principal research analyst with 
Ovum Research. 

New role-based access lets 
users find information relevant 
to their responsibilities on a pro- 
ject, with enhanced views and 
navigation that make it easier to 
find the precise information 
being sought, the company said. 

A trial version of the software 
is available online for 90 days for 
non-commercial use. Beyond 
that, a US$200 per user support 
agreement is required to use the 
full EssWork software. 

EssWork is based on the work 
of Jacobson, one of the "Three 
Amigos" of the Unified Model- 
ing Language, to develop the 
Essential Unified Process in 
2006. His goal at the time was a 
lighter, platform-agnostic deriva- 
tive of the Rational Unified 
Process he helped create in the 
1990s. In an interview with SD 
Times in 2006, he described it as 
"agile, with discipline." I 
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Compuware brings 
Dojo to Uniface 



BY DAVID WORTHINGTON 

Compuware has made it possi- 
ble for Uniface developers to 
write Web applications that use 
the open-source Dojo JavaScript 
library without having to change 
languages or learn the AJAX 
architectural style. 

Uniface 9.4, released in late 
April, adds a layer of abstrac- 
tion to Web application devel- 
opment though an extension of 
the Uniface fourth-generation 
programming language plat- 
form. The company claims that 
Uniface Web applications 
require only one-half to one- 
eighth the lines of code needed 
by equivalent Java or .NET 
implementations . 

Applications execute in the 
browser using the Dojo engine; 
a container architecture pro- 
vides for mashup creation. "It's 
transparent and secure. . .devel- 
opers don't need to learn com- 
plex architecture. We take care 
of that," said Ton Blankers, 



product manager for Uniface. 

Developers can determine 
what parts of an application 
execute client-side and which 
parts run on the server, he said. 
Uniface applications typically 
have "heavy lifting parts" on the 
server-side, he added. "We also 
use Dojo widgets, which have 
gone through an extensive per- 
formance-testing program." 

Compuware also strove to 
make certain that applications 
would be browser-indepen- 
dent, Blankers said. Further, he 
said, developers can reuse Uni- 
face components and applica- 
tion models. He likened Uni- 
face's Web application support 
to when Windows application 
programming was added to the 
platform during the 1990s. 

"A key trend we are currently 
seeing within the application 
development marketplace can 
best be summed by the phrase 
'Back to the Future with Applica- 
tion Development Productivity' " 
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, Uniface 



Uniface applications execute in the browser using the open-source Dojo engine. 



said Al Hilwa, program director tive, model-driven paradigm for support Web 2.0 and cloud 

for IDC's Application Develop- rapidly constructing applica- computing continue to be in 

ment Software research. tions that maximize the reuse of great demand. Uniface appears 

"Development environ- enterprise business logic while to be well-positioned to meet 

ments that provide a produc- leveraging new capabilities to this demand," he added. I 
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eggPlant 



Black Duck has a new downloadable Code Search Plug-in for Visual 

Studio 2010. The plug-in, offered for free, enables developers to 
search code from numerous repositories without leaving the Visual 
Studio environment. It also increases opportunities for code reuse 
with VS 2010 by scanning code using a background agent . . . Test- 
Plant is offering a Windows version of its eggPlant test automation 
software, which uses image recognition to "see" the interface on 
whichever device is being tested. Any icon, 
text or image that can be viewed by the 
human eye can be recognized and remem- 
bered by eggPlant. Once trained by a test operator, eggPlant can 
robotically repeat simple or highly complex test procedures time after 
time, reporting failures by capturing screen images. The company 
already offers versions for Linux and Mac OS X ... A new open-source 
scanning tool from OpenLogic can identify the reuse of more than 6 
billion lines of source code. OSS Deep Discovery has an expanded 
library containing data on more than 330,000 open-source projects . 
. . More than 1,600 math routines are included in the multicore library 
released by Numerical Algorithms Group. The new NAG Library for 
SMP and Multicore contains mathematical and statistical algorithms 
optimized for performance on multicore architectures. 



UPDATES 



mez 



The latest version of Devart's data management software makes it 
easier for developers and DBAs to edit data gueries. dbForge Query 
Builder 1.50 has an improved data editor that reduces the time it 
takes to make queries; automatic connection recovery without gener- 
ating errors; and easier ways to set up databases for script execution 
when working with a SQL document . . . Gomez Platform, a cross- 
browser and device testing system from Compuware, now supports 
the Apple iPad. Developers can test how their websites perform and 
render on the iPad, as well as diagnose and fix application perfor- 
mance issues before or after deployment . . . 
New Relic has announced its hosted application 
performance management software, RPM, now supports Microsoft 
Azure, including SQL Azure and AppFabric. Developers can use this 
product to identify bottlenecks and monitor the performance of apps 
built and deployed on Azure . . . Component maker Xceed has released 
major updates to most of its Windows Presentation Foundation prod- 
ucts, including Xceed DataGrid for WPF Professional Edition and 
Xceed Professional Themes for WPF. The company has also intro- 
ducing Xceed DataGrid for WPF UX Edition and two new themes for 
Windows 7 and Live Explorer . . . PureCM has added agile capabilities 
to its eponymous software configuration management system. 
PureCM 2010-1 supports working with project releases, iterations and 
backlogs, linking these to configuration management to ensure that 
any rescheduling is fully reflected. It also automates task tracking, 
making parallel development easy by matching tasks to releases, and 
supports isolated features without the need to manually create a sep- 
arate code branch . . . DevExpress has announced support for Visual 
Studio 2010 across its WinForms, ASP.NET, Silverlight and WPF 
product lines of controls and tools. In addition, DevExpress continues 
its commitment to the Microsoft developer community with VS 2010 
support for its collection of over 60 free Ul controls, which can be 
downloaded from the company's website . . . The latest update of 
Veryant's isCOBOL Application Platform Suite focuses on building rich 
Web applications, especially in enhancing the appearance of COBOL 
applications accessed from mobile devices such as the iPhone and 
Android. With isCOBOL 2010, developers can now use CSS styles for 
GUI controls to customize screens for targeted mobile devices and 
browsers. A "quick preview" feature lets developers see what the 
mobile user experience will look like from within the IDE . . . New fea- 
tures in Mingle 3.1, an agile project management system from 
ThoughtWorks Studios, include improved collaboration by capturing 
unstructured information, such as comments; new reporting features 
for managers and users; and a variety of enhanced usability functions, 
such as improved history filtering and notification alerts based on mul- 
tiple changes within a workflow. I 



Microsoft aims for top of Bl 
market with SQL Server release 



BY DAVID WORTHINGTON 

SQL Server 2008 R2, formerly 
code-named Kilimanjaro, will 
enable organizations to build 
business intelligence solutions 
that include complex event 
processing, taking Microsoft 
into the high end of the busi- 
ness intelligence market. 

Microsoft shipped SQL 
Server 2008 R2 in April. It is 
available in four editions: Paral- 
lel Data Warehouse, Datacen- 
ter, Enterprise and Standard. 

Microsoft is also continuing 
to ship a free version, SQL 
Server 2008 R2 Express. 
Microsoft has increased the 
maximum database size in SQL 
Server 2008 R2 Express from 
4GB to 10GB. 

R2 introduces a self-service 
analytics component called 
PowerPivot, which works with 
both transactional and stored 



data. PowerPivot, formerly 
code-named Gemini, shares its 
data using Excel 2010 and 
SharePoint Server 2010. Power- 
Pivot is not included in the 
Standard edition of SQL Server. 

Reports will be configurable 
as data services. Report Builder 
3.0 now also supports geospa- 
tial visualization. That will 
enable organizations to view 
geospatially tagged information 
on maps. 

SQL Server 2008 R2 intro- 
duces Microsoft's Streamlnsight 
event processing platform. 
Streamlnsight is bundled with 
the Datacenter SKU of SQL 
Server. 

"[Streamlnsight] looks im- 
pressive on PowerPoint: sophis- 
ticated technology, capable of 
high volume/low latency," said 
Roy Schulte, vice president and 
distinguished analyst at Gartner 



Research. "At this price (free to 
those who buy SQL Server), it 
could be a factor in spreading 
the adoption of CEP more 
broadly." 

Microsoft's stream-oriented 
system is most similar to solu- 
tions from Oracle and Truviso, 
Schulte added. "It's less like 
Progress or TIBCO." Microsoft 
is aiming for the high end of 
applications, he said. 

"It doesn't look like a toy. 
But until I talk to someone who 
is really doing it, I can't be 
sure," Schulte said. 

On the back end, Microsoft 
has scaled up SQL Server's 
SMP support to up to 256 logi- 
cal processors. It has added 
master data services that will 
allow IT organizations to cen- 
trally manage data assets across 
systems to ensure the integrity 
of information. I 



Delphi Prism IDE retooled 
for Visual Studio 2010 



BY DAVID WORTHINGTON 

Embarcadero Technologies has 
retooled Delphi Prism for Visu- 
al Studio 2010's new architec- 
ture, opening up the IDE to 
Delphi developers. 

Delphi Prism 2011, released 
in April, includes a rapid appli- 
cation development tool and a 
new edition of the Delphi 
Prism language. The tool plugs 
into Visual Studio's interface 
and fully supports .NET 
Framework 4.0. 

Delphi, a software develop- 
ment environment first 
released by Borland in 1995, is 
a dialect of the Object Pascal 
programming language. 

The integration goes as 
deep as Visual Studio's struc- 
tures and solution steps, said 
Mike Rozlog, senior director of 
Delphi solutions at Embar- 
cadero Technologies. Other 
new features include code 
obfuscation, parallel extensions 
and the ability to convert C# 
code into the Prism language. 

Embarcadero leveraged the 
Visual Studio 2010 shell to 
offer better usability, from 
code readability to code edit- 
ing, according to the company. 
It also promises cleaner con- 




The Delphi Prism language has been updated to support the capabilities of 
.NET Framework 4.0. 



nectivity to InterBase and 
Blackfish SQL databases, as 
well as the ability to create 
DataSnap clients in .NET that 
connect to Delphi DataSnap 
servers for multi-tier applica- 
tions. 

The Prism language was 
updated with additional con- 
structs to support .NET 4.0's 
features, Rozlog said. There is 
also more interoperability 
between Prism and Delphi, he 
added. "We want it to be as close 
as possible so that developers 



who go from Delphi to Prism 
feel right at home." 

Silverlight 4, which is a sub- 
set of the .NET Framework, 
will be supported in a future 
release of Delphi Prism. 

Delphi Prism also works 
with Visual Studio 2008 and 
MonoDevelop. Developers can 
use Mono, an implementation 
of the Common Language 
Infrastructure specification, to 
build Cocoa-based UIs for 
applications targeting Apple 
hardware. I 
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Introducing the Perforce 
Plug -in for Eclipse 

Work with Perforce from within your 
Eclipse-based IDE. 

The Perforce Plug- in for Eclipse provides developers with easy access to 
Perforce SCM from within iheir Eclipse-based IDE, Functionality includes: 

* Quick access to complete file history 

•Full support of collaborative development with the ability lo merge files 

■ Ability to work offline when connection: to the Perforce Server is unavailable 

-Bullion file compare utility and defect tracking support 

-Supports the ref ado ring functionality of ifie Eclipse environment 



The Perforce Plug-in for Eclipse supports bolh Windows 
and Linux, and is just one of the many integrations 
lhat come with the Perforce SCM System. 
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Download a free copy of Perforce, no questions 

asked, from www.perforce.com. Free technical support is 
available throughout your evaluation. 
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Securitylnsights gives 
benchmarks for software 



BY KATIE SERIGNESE 

For instant comparison of software qual- 
ity against aggregated security bench- 
marks, Veracode, provider of application 
risk management solutions, launched in 
April its Securitylnsights service. 

With a click of the "Compare Me" 
button, the intelligence service checks 
the software against billions of lines of 
code in Veracode's repository, which 
have been submitted to Veracode for 
static, dynamic or manual testing. A 
user's software portfolio can be com- 
pared against applications in his or her 
industry, programming languages (such 
as C, C++, Java and .NET), third-party 
suppliers, or other types of application. 

This service also enables users to set 
security and quality standards for their 
software portfolios so they can see how 



they are stacking up to standards of others 
in the industry, said Sam King, Veracode's 
vice president of product marketing. 

Some categories for comparison 
include vulnerability prevalence, stan- 
dards compliance against C WE/SANS 
Top 25 and OWASP Top 10, and appli- 
cation security policy compliance. 

Although King said this service is not 
the first intelligence service out there, it 
is the first that can "look in" on a code 
level, and focus on the DNA of an app 
and its vulnerabilities. 

Securitylnsights will be available 
within the next two months and will be 
bundled into Veracode's Security Review 
Enterprise Edition at no additional cost. 
It is also available as a standalone ser- 
vice, but a pricing model is still being 
worked out, King said. I 
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SERVOY RELEASING 
JAVA LIBRARIES 
AS OPEN SOURCE 

BY ALEX HANDY 

European Web platform company Ser- 
voy announced earlier this month that it 
will release its core libraries under the 
Affero General Public License (AGPL). 
Those libraries provide Java functions in 
a JavaScript-accessible Web layer. 

Jan Aleman, CEO of Servoy, said his 
company's Web platform mixes the best 
of both worlds. "We've found a good mix 
of not being too runtime-oriented and 
not being too build-oriented. We don't 
generate Java code. Servoy uses a library 
of native Java code that has already been 
built [and] maps against those classes," 
he said. 

"The scripting language in Servoy is 
JavaScript, but it all maps to native class- 
es. Servoy has this library of objects, but 
at the end of the day, they are Java 
objects wrapped in JavaScript." 

Aleman hopes that the open-source 



release of those core Java libraries will 
spark contributions from talented devel- 
opers. While the release of these classes 
under the AGPL may appeal to Java 
developers, he said that they are not the 
target audience of the Servoy platform. 

With JavaScript on top (as the devel- 
oper's access layer), Servoy is aimed at 
Web-native coders. "Our target is not the 
hardcore Java developer," said Aleman. 
"They like complicated things, and we 
uncomplicate things. Our target group is 
someone who would be coding in a 4GL 
language, like Delphi [or] Visual Basic, 
and developers doing PHP or ASP." 

The Servoy development libraries are 
currently expected to be available from 
the company's Subversion servers. The 
source code for the server-side version of 
the Servoy platform should be made avail- 
able towards the end of the month. 

Aleman chose the AGPL license for 
this release because of its simplicity and 
the hosted nature of many Servoy-based 
programs. The AGPL requires source 
code be made available for derivative 
works hosted as a network service, thus 
encouraging ISVs to engage with compa- 
nies like Servoy for commercial licenses. I 
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Drupal popularity expands beyond developers 

Open-source CMS gains healthy following, Microsoft support 



BY ALEX HANDY 

One percent of the world's 
websites may not sound like 
something to brag about, but 



when the Drupal content 
management system hosted 
DrupalCon, its first users con- 
ference in San Francisco last 



month, it became clear that 
the open-source framework 
isn't a niche project. Accord- 
ing to the project's creator, 



Dries Buytaert, 1% of the 
world's websites are now using 
the PHP-based system. 

Drupal users include some 
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high-profile websites. The 
White House announced, dur- 
ing the conference, that it will 
contribute modified Drupal 
code used on whitehouse.gov. It 
marks the first time a U.S. pres- 
ident's IT team has ever con- 
tributed back to an open-source 
project. 

Buytaert created Drupal in 
2001 as a Web-based message 
board. The name comes from 
the Dutch word for "drop," 
the original name of the site 
where he hosted the fledgling 
Drupal code. He went on to 
found a company, Acquia, 
based around offering service, 
support and training for Dru- 
pal users. 

DRUPALCON HIGHLIGHTS 

At DrupalCon, Acquia and 
Rackspace announced a part- 
nership to promote the use of 
Drupal inside Rackspace s host- 
ing and cloud environments. 

"The traction that Drupal 
has made in the enterprise 
market has been tremendous, 
and joining forces with Acquia 
to extend our offering to 
the Drupal customers we 
already support was a natural 
fit," said John Engates, Rack- 
space's CTO. 

Even Microsoft was on hand 
to promote and discuss Drupal. 
The company sponsored Dru- 
palCon, and at the show, it 
announced the release of SQL 
Server Driver for PHP 2.0. The 
new driver is intended to make 
it easier for developers using 
Drupal to build sites that use 
SQL Server by adding support 
for storing PHP data objects in 
SQL Server. 

While actual usage num- 
bers are somewhat difficult to 
come by, the Drupal website 
does track the number of 
update requests it receives 
from installed Drupal servers 
around the world. While that 
number is not directly tied to 
the number of Drupal users 
worldwide, it shows Drupal's 
acceptance by enterprises and 
businesses. 

Those statistics show usage 
of Drupal 6, which is not the 
newest version, grew from 
50,000 active sites in July 2008 
to more than 300,000 sites in 
January 2010. The project 
claims more than 8,000 contrib- 
utors. I 
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Seapine's Quality-Centric ALM Solutions 

Seapine's quality-centric ALM solutions bring extensive 
enterprise capabilities to your software development 
organization. Leverage your existing infrastructure investment 
with solutions that are easy to deploy and manage. Scalable, 
feature-rich ALM tools integrate seamlessly to provide a quality 
management system across all phases of your development 
lifecycle. 

Seapine Supports Your Agile Transition 

Seapine's ALM tools are cross-platform and built on flexible 
architectures using open standards to support today's popular 
development methodologies and best practices. Upcoming 
TestTrack 2010.1 supports your transition to agile development 
while giving your organization the flexibility to manage traditional 
development processes in parallel. 
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New agile capabilities enable you to: 

• Manage backlog and releases 

• Perform sprint planning and tracking 

• Conduct user acceptance tests and define doneness criteria 

• Support multiple products, projects, and distributed teams 

• Generate burn-down, velocity, task board, time tracking, live 
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Experts weigh in on Visual Studio 2010 



< continued from page 1 

deploying Azure platform pro- 
jects. The templates offer 
choices for creating ASP.NET, 
ASP.NET MVC and WCF Ser- 
vice Web roles, he said. 

However, he found fault in 
how the experience is not 
entirely seamless: Developers 
must write PowerShell build 
scripts to securely deploy SSL 
and other certificates for Win- 
dows Azure, he said. 

Other issues cited by Jen- 
nings involve the completeness 
of the user experience. Microsoft 
could improve VS 2010 by mak- 
ing its installation more compre- 
hensive, improving load speeds 
of dialogs, adding spell-checking 
for comment and string assign- 
ments, and enabling its debug- 
ger and IntelliSense code com- 
plete for the Text Template 
Transformation Toolkit, he said. 

"Microsoft has hit its stride 
with Visual Studio on the .NET 
Framework," said Patrick Hyn- 
ds, president of consulting firm 
CriticalSites and a Microsoft 
regional director (who are inde- 
pendent consultants recognized 
by Microsoft for their expertise). 
"There are a lot of great 
enhancements. The tooling is 
starting to catch up [with the 
framework]." 

However, there should be 
feature parity with Expression 
Blend in the next version of Visu- 
al Studio, he suggested. Expres- 
sion Blend is an interface devel- 
opment tool that facilitates 
collaboration among clients, 
designers and developers. 
Developers are "jumping back 
and forth" to access resource dic- 
tionaries in Blend, he explained. 
"It would be great if the [Expres- 
sion] designer role could dock 
and be part of Visual Studio." 



A WISHLIST FOR THE NEXT VISUAL STUDIO 







7 want to see visual 
designers optimized 
for how XAML-based 
interfaces need to be 
constructed/ 

— Billy Hollis, 

Microsoft Regional Director 



'It would be great if the 
[Expression] designer 
role could dock and be 
part of Visual Studio. ' 

— Patrick Hynds, 

President of CriticalSites 



'What I hope for in 
[Visual Studio 11] and 
.NET 5 is added 
simplicity and much 
higher productivity. ' 

—Andrew Brust, 

Chief of New Technology at 
twentysix New York 



7 want parity in 
platforms and 
devices...we are not 
in "write once, run 
everywhere."' 

— Tim Huckaby 

Founder of InterKnowlogy 



Hynds said that developers 
will likely "have to live with" 
several evolutions of Microsoft's 
data access technologies as 
Microsoft builds out its 
ADO.NET Entity Framework. 

Tim Huckaby, a Microsoft 
regional director and founder 
of consultancy group Inter- 
Knowlogy, also expressed a 
desire for feature parity among 
all of the .NET Framework ver- 
sions. Silverlight, he suggested, 
should be able to "trickle down- 
load" (or download components 
as needed) the entire .NET 
Framework instead of being a 
small subset of WPF. 

"And I want parity in plat- 
forms and devices," he added. 
"We are getting close with Sil- 
verlight native on [Windows 
Phone 7], but we are not in 
write once, run everywhere' 
nirvana yet." 

The experts also gave signif- 
icant consideration to user 



experience within both Sil- 
verlight and WPF applications. 

Additional themes and 
designs would make it easier for 
developers to write Silverlight 
and WPF applications, said 
Andrew Brust, a Microsoft 
regional director and chief of 
new technology at consultancy 
firm twentysix New York. 
Developers should not have to 
"muck with" raw Extensible 
Application Markup Language 
(XAML) code unless they want 
to, he explained. "What I hope 
for in [Visual Studio 11] and 
.NET 5 is added simplicity and 
much higher productivity." 

Templates would "relieve 
much of the tedium" in setting 
up an application shell, said 
author and Microsoft regional 
director Billy Hollis. "The cur- 
rent Silverlight Navigation 
Application template is an 
example of what I'm talking 
about, but it is way too simple 



and doesn't use XAML layout 
capabilities effectively." 

Visual Studio has room to 
grow when it comes to design- 
ing interfaces wholly in XAML, 
according to Hollis. "VS 2010 
was a big leap in that respect, 
but the visual designers in VS 
2010 are still oriented around 
easing the transition for people 
coming from older drag-and- 
drop environments. I want to 
see visual designers optimized 
for the way XAML-based inter- 
faces need to be constructed," 
he said. 

Microsoft could address its 
shortcomings by offering differ- 
ent modes for different levels of 
XAML programming experi- 
ence, Hollis suggested. "Some- 
one who understands XAML's 
composition model should not 
have to put up with the stuff the 
designer inserts in an attempt 
to help less-experienced users 
coming from older technolo- 



Oracle launches master data management app 

New product takes aim at cutting costs for suppliers 



BY DAVID WORTHINGTON 

Oracle is leveraging its Fusion 
middleware to allow customers 
to build custom solutions that 
manage their relationships with 
suppliers. 

The company launched in 
late April a master data man- 
agement application called 
Supplier Hub, along with 
another solution called Oracle 
Supplier Lifecycle Manage- 
ment. They work in tandem to 



organize supplier data and 
manage risks. 

Correlating fragmented 
supplier data will help bring 
down the cost of managing 
suppliers dramatically, said 
Nagaraj Srinivasan, Oracle's 
vice president of supply chain 
management. 

Supplier Hub provides data 
discovery, cleansing and gover- 
nance. It can also create data 
services that federate out to 



other systems. 

Pricing is set at US$30 per 
customer record. The products 
are included in Oracle E-Busi- 
ness Suite Release 12.1.2. 

Oracle bundled those basic 
business process workflows into 
the two products, which cus- 
tomers can adapt to their own 
business processes, Srinivasan 
said. However, they are 
required to purchase licenses 
for Oracle's Fusion Middleware 



llg to integrate Oracle's supply 
chain management solutions 
with their own applications, he 
added. 

The Fusion llg middleware 
was released in July 2009. It 
includes Oracle Coherence, 
Oracle Enterprise Manager, 
JDeveloper, JRockit and Oracle 
Web Logic Server, as well mid- 
dleware to enable an event-dri- 
ven architecture within enter- 
prises. I 



gies. And those advanced users 
need template editing and oth- 
er features that we currently 
have to use Expression Blend to 
get to today." 

Today's mainstream IDEs 
may be nearing the end of their 
evolutionary path, O'Brien said. 
"You can edit, jump around 
between files, compile and 
debug. You have a lot of panes, 
you can arrange them, etc. That 
can't be all there is to creating 
software." 

Radical thinking is needed 
in terms of IDEs and code con- 
struction, he explained. He cit- 
ed Code Bubbles, a Brown Uni- 
versity research project, as an 
original approach to rethinking 
IDE user interfaces. "I person- 
ally don't think that's 'the' solu- 
tion to code editing, but I 
admire the originality." 

Transitioning Visual Studio 
to WPF as the underlying plat- 
form for Visual Studio opens it 
up to broader possibilities for 
visualizers and other interac- 
tion patterns in the IDE, Hollis 
said. "In this version, the objec- 
tive was simply to get to the 
new WPF platform. I hope the 
team gets a lot more ambitious 
for the next generation. 

"In particular, I hope the 
people doing interaction design 
for the next Visual Studio move 
beyond thinking of the IDE as a 
collection of rectangles that 
stuff gets poured into," he con- 
tinued. "There is enormous 
room to use the capabilities of 
WPF to craft much richer, 
more interactive developer 
experiences in the IDE." I 
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App modernization gets a boost from HP 

View of dependencies, automated testing on Web frameworks are added in 



BY KATIE SERIGNESE 

With application modernization 
seemingly on the minds of many 
organizations, HP in late April 



announced two tools to help 
manage the process: HP Service 
Test Management (STM) 10.5 
and HP Functional Testing 10.0. 



Layered on top of HP's 
Quality Center, its platform for 
managing quality through the 
entire application life cycle, 



STM 10.5 gives users the ability 
to look at their new modern 
application models. Architec- 
ture has moved from monolith- 
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ic and single-siloed to being 
very component-oriented, said 
Kelly Emo, HP's director of 
application product marketing. 

In STM's graphical testing 
environment, testers can see all 
dependent components, poten- 
tial changes and what touches 
everything else in order to see 
where risk points are. This 
enables testers to know what and 
where to test, and what the 
dependencies are before porting 
legacy code to another system. 

"When you have all these 
moving parts, it's easy to lose 
track of what's dependent on 
what," Emo said. "This helps to 
understand the ripple effect." 

Aside from STM, HP added 
two features to its Functional 
Testing automated testing tool. 
In order to create automated 
tests using the latest versions of 
Web 2.0 frameworks (such as 
AJAX, Dojo or Silverlight), HP 
added the new Web 2.0 Fea- 
ture Pack. To extend its tool out 
to other development frame- 
works, HP also added the 
Extensibility Accelerator. These 
two additions come with the 
tool free of charge. 

These announcements are 
in response to a Forrester 
Research study — commissioned 
by HP — that provided insight 
into why organizations are look- 
ing to modernize their applica- 
tions. In a survey of 206 IT deci- 
sion-makers, 53% responded 
that their applications are based 
on obsolete technology, followed 
by 51% who thought the apps no 
longer met business require- 
ments and 41% who said their 
applications are unstable or dif- 
ficult to maintain. 

Forrester analyst Phil Mur- 
phy said he has seen the trend 
towards modernization move 
from a necessary evil to needing 
a modern process to keep port- 
folios clean. "Modernization is 
at the forefront of companies' 
minds," he said, and it's becom- 
ing an ongoing thing rather 
than something that is dealt 
with later on, he added. 

"These two products are 
examples of new capabilities 
we're delivering to support 
that overall initiative in the 
context of life-cycle manage- 
ment," Emo said. Both tools 
are available now, and STM 
starts at US$3,000 per concur- 
rent user. I 
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Salesforce, VMware unite 
to push Java into the cloud 



< continued from page 1 

next-generation cloud applications? Is 
there a gap between where Java is and 
where cloud computing is going?" 

Paul Maritz, CEO of VMware, said 
that "developers value, above everything 
else, productivity." He said that, for new 
applications, deployment to a cloud can 
increase productivity and reduce inter- 
nal IT complexity He said that these 
benefits are at the heart of the partner- 
ship between VMware and Salesforce. 

Benioff declared that he and Maritz 
"believe that this gap must be filled, and 
that it's an imperative, so we can deliver 
those Java developers to the cloud. That's 
why we're coming together, because we 
believe strongly it is time to deliver the 
next generation of application develop- 
ment and deployment capabilities." 

According to the companies, VMforce 
should open up to the public this fall. The 
Java hosting cloud will be based on 
VMware's vSphere virtualization manage- 
ment software, which itself originated as a 
set of internal tools at cloud hosting 
provider Terramark. Those tools have 
been evolving and maturing into a forth- 
coming internal cloud systems manage- 
ment tool suite, based upon the needs of 
VMware's preliminary customers. 

On top of vSphere, the VMforce 



cloud will offer a Spring application- 
hosting layer and a database. Developers 
will use the SpringSource Tool Suite to 
build and deploy applications built 
specifically for the VMforce cloud. Those 
tools will include automatic analysis tools 
that can call out the portions of an appli- 
cation that will need to be changed to 
work in a cloud environment. 

Rod Johnson, general manager of 
VMware's SpringSource business unit, 
demonstrated the creation of a VMforce 
application on stage during the 
announcement. "The SpringSource Tool 
Suite is a free development environ- 
ment," he said. "You're able to use the 
familiar skill sets of Java and Spring. If 
we wanted to create a new application, 
there are a number of wizards. We can 
simply create a new application using 
Spring template wizards." 

The VMforce platform is targeted at 
developers creating new Java applica- 
tions for the cloud. Peter Cooper-Ellis, 
senior vice president of engineering and 
product management at VMware's 
SpringSource business division, said that 
applications using Enterprise JavaBeans 
aren't candidates for moving to 
VMforce, and that other Java EE appli- 
cations would require significant rework 
in order to run in that environment. I 



Java ready for safety-critical apps 

LDRA announces support for object-oriented language 



BY DAVID RUBINSTEIN 

With the impending release of the DO- 
178C safety standard for certifying object- 
oriented software, code analysis and veri- 
fication company LDRA announced in 
late April that it will support the Java pro- 
gramming language in its tool suite. 

Java has not been used in safety- 
critical applications because there is no 
clear guidance on how to certify it, 
according to Ian Hennell, LDRA's 
operations director. 

"From our perspective, Java's time is 
now firmly in the frame," he said. "It's 
not necessarily about embedded. Java's 
being used in areas where more rigor is 
being demanded." 

Hennell added that Java is mostly 
used in networking, communications 
and UI components of complex, safety- 
critical applications. 

Another effort, JSR-302 for safety- 
critical Java, is taking the processes, rig- 
or and certification required by these 
types of applications and bringing it to 
the wider world, he added. "The maturi- 
ty and acceptance of the language, with 
new certification controls... You have to 
take Java into account now." 



Hennell said organizations can learn 
from others where rigorous coding stan- 
dards are mandated — often projects that 
are expensive but funded by the U.S. 
Department of Defense — and apply that 
same level of rigor but at much less cost. 

Java support will appear first in Test- 
bed, the company's static and dynamic 
analysis engine; TBrun, the company's 
automated unit test engine; and the 
company's TBvision reporting and man- 
agement software. 

AGILE FOR CRITICAL SOFTWARE 

At the Embedded Systems Conference 
in San Jose in April, LDRA announced a 
partnership that will bring Codice Soft- 
ware's Plastic SCM configuration man- 
agement solution into LDRA's Embed-X 
verification tool suite. 

"Rigor has to be applied in a more 
flexible way" in organizations that are 
looking to do rapid prototyping, adapt to 
changes and develop software in short 
iterations, Hennell said. 

Codice, which has partnered with 
LDRA before, also has created a per- 
sistence mechanism for the Embed-X 
suite. I 
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SEMAT: Defining software engineering 



< continued from page 1 

gramming and language theory. 
Soley explained that soft- 
ware engineering is gravely 
hampered by immature prac- 
tices. "When technology is new, 
it's the wild wild West. When it 



gets to be 50 or 60 years old, an 
engineering discipline evolves," 
he said. To be a true discipline, 
it must have wide awareness, be 
supported in the industry and 
taught in the universities. 

One of the challenges the 



SEMAT group hopes to over- 
come is simply getting everyone 
into the same room. It's similar 
to the challenge Soley faces at 
OMG. "We bring together ven- 
dors and practitioners, but not 
enough academics," he lament- 



ed. "To put together a core the- 
ory and best practices, you need 
to see it from a standards per- 
spective, an industrial perspec- 
tive, a vendor perspective and 
an academic perspective." 
Soley pointed out that the 
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SEMAT effort is not about a 
product, standard or curricu- 
lum. "It's just a group of people 
trying to come up with a core 
set [of] kernel universal prac- 
tices that can be used to 
describe a methodology." 

The group held its first work- 
shop in Zurich, Switzerland, in 
mid-March, working to define 
the requirements of the 
SEMAT initiative and to define 
software engineering, among 
other tasks. The workshop 
attracted 28 participants, among 
them Alistair Cockburn, a 
leader in the agile software 
movement; Larry Constantine, 
a pioneer in humanizing soft- 
ware development; Tom Gilb, 
an author on software engineer- 
ing and measurement; and 
Robert Pettit, an expert in 
object-oriented design and real- 
time systems. A second work- 
shop is scheduled for mid- July. 

Six working groups were 
formed at the March workshop 
to define terminology, the ker- 
nel language, the universals, 
core theories, requirements, 
and assessment of the work. 
"It's amazing how often people 
don't measure their work," 
Soley commented. "How do 
they define success?" 

Soley said his group is not 
trying to build a new methodol- 
ogy for creating software. 
"There are enough of them 
already," he said. Instead, it is 
seeking to define the patterns 
and practices that are the same 
across any methodology. 

"What are core? Whether 
it's a real-time application, [or] 
Flash on a Web or ERP, there 
are some core universals," he 
said. "If we're successful, we 
should be able to map out any 
methodology with those uni- 
versals." 

Soley added that the group 
will know if the universals are 
correct if they can be composed 
to describe all methodologies in 
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Ads in applications: The time has come 



< continued from page 1 

mising valuable user space to 
accommodate banners and 
advertising." 

However, with changes in 
technology over the past 10 
years, Root's opinions have 
changed somewhat as well. 

"Technology has also ad- 
vanced to the point that con- 
sumers can make choices," said 
Root, now the president of En- 
Vision Outdoor Living. Rather 
than dealing with a static ad or 
pop-up ad as frequently as peo- 
ple had to 10 years ago, tech- 
nology has now evolved enough 
that consumers can opt for dif- 
ferent, non-ad versions of pro- 
grams, or choose to ignore ads 
more easily because consumers 
are given options to view or opt 
out, Root explained. 

Gartner analyst Andrew 
Frank agreed with Root's opin- 
ion in 2000 and pointed out that 
before widgets, which helped 
create branded content, apps 
were more utilitarian and 
advertising wasn't seen as 
appropriate. But with things 
like Facebook and other social 
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Greater consumer choice is making ads in applications such as this one 
less intrusive, say experts. 



media platforms, ads in apps 
really took off, he said. 

Ads have also become so 
interactive and integrated into 
apps that it's hard sometimes to 
even tell the difference 
between the two, Frank said. 
And of Apple's new iAds plat- 
form coming into play: "I think 
[iAds] is certainly starting to 
blur the lines between the con- 
cept of an app as an ad and an 



app as a media spot where an 
ad can occur. Now we see both 
things coming together," he 
said. 

Apple's newest platform will 
now move complex, interactive 
ads into mobile applications for 
the iPhone, iPod touch and 
iPad. This move can also prove 
lucrative for developers, who 
will receive 60% of the ad rev- 
enue run on their programs. 



At the iPhone OS 4.0 
launch, where the iAds plat- 
form was announced, Apple's 
CEO Steve Jobs estimated 
there will soon be around 100 
million Apple devices on the 
market and that most people's 
mobile activity will be dominat- 
ed by spending about 30 min- 
utes a day using applications. If 
10 ads were to appear on each 
device per day, it would make 
for about 1 billion ad impres- 
sions daily, according to Jobs. 

"I think [iAds] can be very 
viable. It just has to be done 
right so it's not an intrusive, 
interrupting experience for the 
consumers," as was the experi- 
ence 10 years ago, Root said. 

Matthew Weinberger, an 
associate contributing blogger 
for value-added reseller The 
VAR Guy and an app consumer, 
said, "If it helps keep a useful 
app free or at least cheaper, 
then more power to them." He 
added that in order "to stay 
competitive in the app store, 
you have to price your stuff low, 
and the developers have to 
make money somehow." 



Gary Chattem, another app 
consumer, has a different opin- 
ion. "I'm willing to spend 
US$1.99 for an ad- free version 
to not be distracted," he said. 
However, he does use some 
apps with ads, but if he clicks 
on an ad enough times, he 
won't use the app anymore. He 
has also learned that "after 
awhile, you know what ads are 
tolerable after using the apps." 

Deborah Schultz, partner 
at digital strategy consultancy 
firm Altimeter, agreed that ads 
have their time and place, but 
has also seen a change in con- 
sumers' expectations about 
what an ad should offer. "The 
'telling and selling' model 
doesn't work anymore," she 
said, "and ads need to be con- 
textually meaningful to [con- 
sumers]." 

Modern technology has 
enabled apps and ads to now be 
contextually meaningful to con- 
sumers, but it also raises the 
bar for developers to create 
something more interesting 
But if done right, 
"The future of 



every time. 
Root said, 
advertising 



in apps is very 
promising and can be a real win 
for consumers, advertisers and 
developers." I 
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Different Avenues 

to Multicore 



DEVELOPERS CAN CHANGE PRACTICES 
OR TAKE THE VIRTUALIZATION SHORTCUT 



BY ALEX HANDY 



(iiftf«*'« •■»; wj: (« t v«icBi!i * • mm 



VBl KD^ ,,T|) V«l *' 



B I 



cheat or not to cheat. This 
- is the central question for 
I I Ji developers faced with an 
J ever-growing number of 
processor cores in their 
servers. For the absolute best results, it's 
long been understood that development 
managers and software architects need- 
ed to change practices and policies from 
the ground up. But virtualization makes 
possible another avenue, one that some 
would deem to be "cheating." 

Matt Lavallee, director of technology 
at Multiple Listing Service Property 
Information Network, said that virtual- 
ization allows applications that scale 
across a data center to also scale across a 
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multicore servers processor. 

"Virtualization lets you cheat," he 
said. "Instead of having to learn how to 
scale, you can run multiple nodes in par- 
allel. That's the approach we took with 
our Web servers. Instead of adapting 
and rewriting, we just run 10 times as 
many servers on one box." 

Cheating or not, it's a quick fix for a 
difficult problem, and determining 
which approach is best suited to your 
application could be an even tougher 
proposition. 

Behrooz Zahiri, product marketing 
manager at Coverity, said that choosing 
between multithreading and distrib- 
uted computing is an application-spe- 
cific affair. 

"They both are forms of 
multitasking, but they are 
quite different," he said. 
"Running on virtual 
machines is easier, but it 
usually provides suboptimal 
results. Sometimes an appli- 
ood fit for the 
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It's important to figure out what portions of your multicore 
application are best handled by the operating system. 



conquer 
approach. If it doesn't have a 
lot of dependencies, you can 
cut it into pieces and do 
some merging at the end." 

But Irv Badr, senior prod- 
uct manager at IBM Soft- 
ware's Rational division, said 
that smart developers know 
where to let the operating 
system handle multicore, and 
when to take hold of threads 
themselves. 



"It is advisable to defer the core affin- 
ity and runtime scheduling for multicore 
to the OS. In order to maximize gains 
from this revolutionary technology, the 
architect and systems engineers should 
own the top-level multicore architec- 
ture," he said. "This allows them to be 
closer to the stakeholder and customers 
and control their multicore experiences." 

NO MORE FREE RIDES 

Bruce Wright, director of operations at 
search engine company Kosmix.com, 
said that the ever-increasing number of 
cores in server processors forces devel- 
opers to stop relying on Moore's law to 
improve performance. 

"The clock-speed war we had in the 
last decade is over. It masked a lot of 
poor programming," he said. "No matter 
what you programmed, it would get 
faster as clock speeds increased. 

"If it will take advantage of multiple 
cores, sure you have to worry about 
locks (for concurrency control), but you 
end up getting a lot more work done" 
per computer. 

Usman Muzaffar, vice president of 
product management at Electric Cloud, 
said that "there's no shortcut around the 
fact that to take full advantage of a mul- 
ticore architecture, you've got to be 
designed from the ground up to be that 
way." 

He added that there are two ways to 
approach multicore applications: "With 
an event model or a thread model. 
Events are nice and simple, but they 
don't take advantage of multiple cores." 



n 


(*ii 



re I 



The thread model, on the other hand, is 
somewhat more complicated to imple- 
ment, he said. 

"One architecture that is easy to use 
to deal with threads is a pool-based 
architecture," said Muzaffar. "This is 
where you have a bunch of worker 
threads, each of which try to share as lit- 
tle state as possible. Each has to do their 
own thing. That's the architecture I've 
seen most. But that's a little like saying 
the solution to traffic problems is to dri- 
ve safely: It's easier said than done." 

Badr said that multicore develop- 
ment shines a light on many new con- 
cerns for developers. 

"Currently, most platforms are either 
architected for sequential processing or 
realize concurrency through multitask- 
ing, rather than true parallelism provid- 
ed by a multicore processor. In both 
these scenarios, common concerns, such 
as core assignment (affinity), memory 
sharing, and cache management are not 
directly addressed. 

"Consequently, the application is 
burdened with the implementing of the 
aforementioned features, which signifi- 
cantly increases its complexity; especial- 
ly, that of the lower application layers 
that commonly interact with the multi- 
core platform. This includes, to name a 
few, device managers, device drivers, 
Input/Output systems." 

TOUGH TESTS 

No matter what approach you choose, 
Muzaffar said that multithreaded pro- 
gramming will always make things diffi- 



www.sdtimes.com 



! Software Development Times , May 15, 2010 



SPECIAL REPORT 



23 




cult when it comes to testing. "It's a giv- 
en that your software is going to have 
bugs. What makes multithreaded pro- 
gramming a nightmare is that the system 
is not deterministic anymore," he said. 

But there is a solution. Muzaffar said 
the team at Electric Cloud solved the 
problem by writing additional testing 
tools. "We wanted to come up with a 
framework, so once we identified a test 
case or a bug, we could replicate that 
problem. What you have to come up 
with is a way to force your threads to 
synchronize out of order. We wrote a lit- 
tle helper server; applications talk to that 
server and say, Thread one, go here, 
now wait. Thread two, go here, wait; 
now thread one, do what you're not sup- 
posed to do and crash.' " 

Coverity's Zahiri said that moving to 
multicore doesn't mean completely 
rewriting your application. It just means 
minding your threads and managing 
your resources properly. 

"You do not need to completely 
rewrite your applications," he said. "Java 
provides a lot of help already. There are 
a lot of safe, secure practices people use. 
It has proper access controls, and the 
order of operations is configured to 



avoid problems. It's more about taking 
the extra step and making sure you syn- 
chronize those events and make them 
safe, as opposed to completely rearchi- 
tecting your application." 

Zahiri added that most of the prob- 
lems he sees in his customers' applica- 
tions are related, specifically, to poor 
resource allocation. 

He said the three biggest problems 
are "race conditions, deadlocks and 
resource leaks. Deadlocks are not that 
common. Race conditions are more 
common. But the biggest problem peo- 
ple run into, by far, is resource leakage. 
The result is typically performance 
degradation over time, making the pro- 
gram useless." 

Badr said that there is help out there, 
typically from the operating system. 
"Enterprise systems commonly defer 
multicore-related choices to the operat- 
ing system. In Windows Environments, 
the OS performs many of the chores 
such as load balancing, inter-process 
communication and memory manage- 
ment, freeing the application from 
using core-affinity, cache and memory 
management, and communications 
APIs specific to multicore systems. It is 



when applications lose both control and 
monitoring of multicore application that 
negative gains and resultant anxiety 
occurs. 

"People are doing a good job of mak- 
ing threads safe, but when we scan pro- 
grams, we find there are issues with the 
way resources are being allocated and 
used. That ultimately results in the pro- 
gram being useless, but it starts with 
performance degradation." 

HARDCORE FUTURE 

Badr advises companies to look to mod- 
el-driven development (MDD) to push 
their applications into a multicore world. 
"Model-driven development not only 
allows for refactoring legacy compo- 
nents into the final multicore applica- 
tion, but it also allows the architect to 
perform extensive tradeoff studies in 
different multicore configurations, con- 
verging on an optimum solution for the 
final deployment," he said. 

"Through MDD, the development 
team can easily refactor and redeploy a 
single-core legacy application onto mul- 
ticore systems. At the same time, MDD 
allows the architect to perform tradeoff 
studies and what-if scenarios at the mod- 



el level, hiding the underlying platform 
complexity and reducing much of the 
intimidation factor common with adopt- 
ing new technologies." 

Muzaffar said that he expects multi- 
core programming to get easier over 
time. He said abstractions will have to 
be created by those in the industry, and 
that these layers will help to simplify the 
creation of solutions. 

"There was a time, not too long ago, 
when programmers had to be responsi- 
ble for every little thing in the operat- 
ing system. In time, those were 
abstracted away. Half of the innovation 
of Java was not having to deal with 
memory allocation," said Muzaffar. He 
hopes similar advances will take thread 
management out of developers' hands, 
as well. 

Those helpers, such as Intel's 
Threaded Building Blocks libraries, will 
be even more useful as multicore 
processors spread from servers and 
desktops into mobile devices and 
embedded appliances. 

"Handheld devices will start embrac- 
ing multicore architecture soon. I think 
we will have multicore phones in our 
hands by next year," said Zahiri. I 
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Take Advantage of Inter Multi-Core and Inter SSE4.2 
Instruction Sets for High-Performance SOA 
and XML Processing without Coding 
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Intel® SOA Expressway enables enterprise SOA deployments to become more 
cost-effective, scalable and secure by delivering service governance, mediation 

and security in a flexible soft-appliance form factor. 



Intel SOA Expressway can be hosted on a server running Red Hat, SuSE Linux, Windows 2003 natively or over VMWare/Xen environments. It can be 
co-hosted with ISV or end user application or run purely as an intermediary. An overview of an Intel SOA Expressway service gateway deployment: 
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SOA Expressway delivers continuous improvement for XML-based solutions through enhanced feature support 
for upcoming generations of Intel® architecture-based servers. Support for Intel® Streaming SIMD Extensions 
42 (Intel® SSE42) instructions built into SOA Expressway, allows applications to immediately deliver perfor- 
mance improvements of as much as 20 percent or more on non SSE 4.2 enabled platforms. 

Accelerate and Rapidly Deliver a SOA based Software Solution 

■ Automatically take advantage of new Intel Core i7 processor features, such as Intel SSE4.2 

■ Eliminate performance and security overheads of moving to XML based solutions. 

■ Deliver adaptable service interfaces that can more readily respond to business change 

■ Immediately adds 2x-20x performance improvements without having to recode the application 

■ Decreases code maintenance, relative to internally developed components 

■ Improve total cost of ownership for both solution providers and IT 

As IT organizations of all sizes struggle to accomplish more with less, many are turning to new types of solutions in areas 
such as Service-Oriented Architecture (SOA), Software as a Service (SaaS), Web 2.0, and enterprise mash-up applications. 
These novel approaches can help organizations improve return on investment while increasing agility. Because this is new ground 
for many companies, they look to external expertise to show them the way, which provides a dramatic opportunity for solution 
providers. Both SOAP and REST are based on Extensible Markup Language (XML) which has become the industry standard for the 
machine-to-machine communication that underlies these innovative solution approaches. To make the most of this opportunity for itself and its 
customers, Intel is delivering both the hardware platform and software technologies that increase the performance and address the common hurdles 
in using SOAP and REST solutions while also making it faster and less expensive to bring them to market. 

Intel SOA Expressway provides highly optimized building blocks for SOAP/REST solutions that let solution providers focus on product innovation instead of 
reinventing the plumbing that underlies it. 

Intel SOA Expressway provides high performance SOA or REST based SOA integration, governance and security. These usage models are driven by SOA 
Expressway's ability to parse at high speed any data format over any transport protocol. Messages generated by Java or .NET endpoints, can be delivered 
encrypted in the payload or as attachments. In-built services such as validation, encryption/decryption, signing/verification, transformations, XML threat 
protection, service invocation and content based routing are available for value-added processing. SOA Expressway provides a high performance runtime 
environment to create workflows that invoke these underlying services, execute related fault-handling, and provides constructs such if-then-else, pipelining, 
synch-to-async bridging as well as "best-use" policies for sequencing and reliable delivery, The runtime policies driving this functionality are executed over an 
XML virtual machine that has been optimized over last 1 years for superior performance. 




■ Single entry point for all 
application traffic 

■ Separation of concerns 

■ Edge security provides 
earlier threat detection 
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Prepare Solutions to Win on Next-Generation Hardware with SOA Expressway's 
Intel SSE4.2 Enablement 

Intel SSE 42 is a set of seven new instructions supported by Intel Core \7 processors that power the next 
generation of server and desktop systems. It includes four instructions that use SIMD techniques to 
accelerate string and text processing, which provide significant performance benefits in XML processing. 



Intel SSE42 requires no new operating system support to save and restore the register state beyond what is 
required by SSE. Moreover, Intel SSE4.2 is fully compatible with software written for previous generations of 
microprocessors with Intel® 64 and IA-32 architectures. 

Existing software continues to run correctly without modification on microprocessors that incorporate Intel 
SSE4.2, as well as in the presence of existing and new applications that incorporate the new instruction set. 

Build Solution Profitability with Intel® SOA Expressway 

To power SOA/REST based solutions, vendors and end-users must obtain the underlying mechanisms that interpret 
and process the XML streams from an external source, or they must build those mechanisms themselves. 

In the former case, open-source components such as those provided by the Apache Foundation's Xerces and Xalan projects, 
as well as GNOME'S libXML and libXSLT libraries are a common choice. For full SOA Solutions, Axis2 or JBI based frameworks 
are common choices. Although these are high-quality components, a significant lag is typical in taking advantage of new 
hardware architectures and features, as techniques for taking advantage of those features take some time to become known 
throughout the community. Further, many of these open-source SOA solutions are not designed for targeted usage models 
such as governance and security. Typically they make a compromise of performance against flexibility. On the other hand, the 
alternatives are hardware appliances for governance, security and service bus usage models. These include IBM WebSphere 
Datapower and other similar products. Such products make the flexibility tradeoff in order to achieve better performance and rapid deployment. The 
challenges they face are the optimizations achieved in custom silicon which have been overrun by Moore's Law and the lack of extensibility and flexibility 
for multi-core and virtualized environments. 



To read the full white paper, view video usage models, obtain a SOA performance benchmark tool, or trial eval software visit: 

www.comparedatapower.com 
www.intel.com/software/soae 
E-mail: intelsoainfo@intel.com 
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FROM THE EDITORS 

The grand unifying theory 

Without fanfare, a group of Big Thinkers in computer languages, 
processes and practices gathered in Zurich last month to try to cre- 
ate a definition for software engineering methods and theories. We wish 
them luck, but are skeptical that their effort will make any significant dif- 
ference about how software is written, tools are marketed and students 
are taught. 

The SEMAT group's goal is an admirable one. Like theorists and prac- 
titioners in other fields, they see the need to bring our industry together. 
They see a need for academics and standards bodies to set universal def- 
initions that can be taught in universities and practiced in development 
shops around the world. That's a great goal. 

They cite such fundamental failings as fads in software development. 
They worry that universities lag behind the industry in teaching what is 
being used in the field. They're right on both counts. 

The first SEMAT workshop resulted in the creation of six working 
groups to tackle, among other things, the creation of a language to define 
those universals. This effort might take years to yield fruits. And, we 
believe, even when it does, its impact on real-world software develop- 
ment will be minimal. 

The last time Big Thinkers came together to take on software devel- 
opment, the result was the Agile Manifesto, a set of rules that real-world 
practitioners could apply to their development organizations to stream- 
line work, reduce costs, and create better software faster and more 
cheaply. Although some theory went into the manifesto, the document 
resonated because of its sheer practicality. You could use the manifesto 
to transform a corporate develop team. 

The SEMAT effort is rooted entirely in theory, with the goal of being 
able to define universals that encompass every possible software method- 
ology. If a methodology falls outside the universals, more universals will 
be created to ensure that the methodology is included. 

The work to bring teaching and practice together to advance software 
as an engineering discipline is indeed noble. But while these Big 
Thinkers labor to create those universals, there are programmers sitting 
in Boston, Brussels and Bangalore working long days to create and ship 
software. Development teams must do more work in less time to write 
applications for systems that have grown more complex. We're not sure 
how SEMAT will help. 

In our skeptical way, we wonder: If a methodology is defined but no 
one is around to care, does it make a sound? 

Ads in the apps, 10 years later 

For some developers, advertisements embedded into applications 
may represent a significant revenue streams that makes your com- 
pany viable or a particular application possible. 

Ads can also mean money lost. A negative ad impression is not bet- 
ter than no ad impression at all, and your customers can be left with 
bad tastes in their mouths about brands — and your apps — if they find 
ads too bothersome. But developed correctly and tastefully, embedded 
ads can prove to be a win-win-win scenario for consumers, developers 
and advertisers. 

Technology is emerging that offers consumers a non-invasive ad expe- 
rience. Video ads, sponsored quizzes and other interactive content can 
make advertising not only effective but also fun. In fact, some of those 
advertising technologies have also become so advanced that even a line 
is starting to blur between an app and an ad. 

We applaud the advancements in ad-embedding technology and urge 
you to take advantage of it where appropriate. We also caution that you 
to make sure that it's executed right. We know there will always be con- 
sumers willing to pay for ad- free versions of apps, while there will always 
be others willing to tolerate the ads in exchange for free software. It's 
good business to cater to both groups of customers. I 



A litmus test for an open-source 



Paul Fremantle 



Recently a colleague from Apache 
commented to me that there are no 
such things as open-source companies. 
Instead, he identified a few types of 
companies that "make money out of 
open source": 

• via expertise in consultancy 

• hoarding copyright ownership 
for a big sale 

• providing additional val- 
ue on top of open-source 
products 

• licensing fear, uncertainty 
and doubt (choosing GPL 
to make users who fear 
GPL pay) 

As the vice president of the 
Apache Synapse project and 
the cofounder of an open- 
source company, I regularly 
think hard about what an 
"open-source" company means. While I 
agree that examples of that list of types 
exist, I also think there is another 
approach. 

Michael Porter, the Harvard Busi- 
ness School professor, is widely consid- 
ered to be the leading expert on com- 
petitive strategy. He identifies three 
generic strategies for competitive advan- 
tage: cost, differentiation and focus. 

Differentiation was obviously the 
first strategy for open-source compa- 
nies — for example when MySQL was 
the only commercial open-source data- 
base. However, that time is over. There 
are very few areas where you can point 
to just one open-source project and one 
company. 

Cost is seen as the next competitive 
strategy for open-source companies. 
However, this is a weak strategy for 
selling complex software. Usually the 
value of the software to an enterprise is 
much higher than the actual cost, and 
the negative value — the risk associated 
with the project failing — is many times 
the cost of the software. What this 
means is that few enterprise companies 
choose software with cost as their first 
criteria. 

That leaves focus. What is a focus 
strategy? A focus strategy is where you 
shape a company around a focus: mak- 
ing every part of your business focused 
on that single-minded aim. Michael 
Porter has been vociferous in the sup- 
port of this model, and I believe it's the 
only one that is sustainable. It means 
focusing on using every aspect of open 
source to ensure that a company delivers 
something better and different from 
other software companies. 

One key aspect of the focus strategy 
that Porter points out is that you can- 
not be the "everything to everyone" 
company. Focusing on one area inher- 
ently rules out some customers, but it 
drives other customers to you more 
strongly. 




STAYING ALIVE IN FOUR STEPS 

Here are some of the ways that I believe 
a company must apply its focus if it is to 
have a truly sustainable open-source 
model. 

It is about open development. 
Open source is not just about the end 
product (the code), but the process — 
the development model. Companies 
that have created code and 
then published the code as 
open source have rarely suc- 
ceeded. Code should be 
developed in the open with a 
public code repository, pub- 
lic mailing lists, even a public 
"architecture" discussion list 
to define the overall archi- 
tecture and approach. 

It is about community. 
A community is not mea- 
sured in downloads. A collection of peo- 
ple who only consume the software is 
not a community. Having users con- 
tribute, help each other, and submit 
code and patches, involving the commu- 
nity in major decisions, and inviting 
them to participate in the design process 
as well; these all build a real participa- 
tion that strengthens the code and the 
company. 

It's also about participation in multi- 
ple communities, such as Apache and 
Eclipse, and not just using those com- 
munities, but actively contributing to 
them as well. 

It is about the license. GPL is a 
great license for two different kinds of 
models. In Irish Music, there is a term: 
"pure drop," which means pure, 
unadulterated Irish music, with nothing 
imported from outside such as rhythm 
guitar backing. 

Pure-drop music is beautiful and very 
hard to play well. I think there is a simi- 
lar community in the open-source 
world, a community where no propri- 
etary code is used at all. In the pure- 
drop open-source community, GPL is 
king. If everything you do is GPL, then 
there can be no contamination. Howev- 
er, this community isn't a great commu- 
nity to build a commercial business on, 
and this is not the focus of companies 
that use the GPL license. 

The second model where GPL is 
used is to protect code and force compa- 
nies to buy a commercial (i.e. non-open- 
source) license. The logic is simple: 
Most companies don't like GPL. The 
company that owns the copyright to a 
GPL codebase can re-license the code 
under a different license to those willing 
to pay. 

However, the GPL does not build the 
community outside of the pure-drop 
adherents. For example, most compa- 
nies do not allow their employees to 
work on and contribute to GPL projects. 
We have found that the Apache Soft- 
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ware License v2 does help build a col- 
laborative community around our pro- 
jects, and we are now seeing a few com- 
panies build a successful business on a 
open, non-viral license that is used to 
permeate the entire business model. 
The Apache license is a great license for 
collaboration. 

It is about the processes your 
company implements. Here are a few 
simple examples: 

Open-source projects don't imple- 
ment features just because they are on 
some feature list; they wait until there 
are user involvement and requirements. 
An open-source company needs to 
implement the same strategy. Doing so 
results in much shorter development 
cycles focused on specific features and 
improvements, together with much bet- 
ter scenarios and a focus on the most 
important scenarios. 

Open-source projects don't have sep- 
arate support teams and separate test 
teams. Developers are much more 
rounded; they interact with users, pro- 
vide support, and write test cases as well 
as write code. Open-source companies 
can benefit by implementing this model 
so that the development team not only 
provides support, but also goes onsite 
with customers, and writes technical 
articles and blogs. 

Why is this beneficial? Firstly, issues 
are resolved much faster. The second 
benefit is that developers have a much 
better understanding of real customer 
pain points than the average developer 
in a development lab. 

Many open-source projects (especial- 
ly those at Apache) operate on a princi- 
pal called meritocracy. This is the idea 
that the projects are led by the people 
who actually earn that right through 
merit and successful effort. Another way 
I've heard this described is as a do-ocra- 
cy: The people who have to implement 
the code make the decisions. 

I personally have been in many argu- 
ments with the youngest developers in 
my organization, and their ideas and 
input are given as much space as anyone 
else. We all benefit when the project 
leaders are those who have simply 
proven their worth irrespective of age, 
time served, golf club membership, or 
any of the other proxies for merit that 
rule in so many other domains. 

So how would I define an open- 
source company? My definition is that 
the company is committed to using open 
source to create an ongoing competitive 
advantage — not just in one aspect (i.e. 
code licenses), but in every aspect of 
that company's operations. And yes, 
there are a few of us around. I 

Paul Fremantle is CTO and cofounder of 
WS02, and vice president of Apache 
Synapse. 







SOME DEVELOPERS HAVE BEEN 

left feeling a little apprehensive after 
recent moves made by Twitter to create 
its own apps for the iPhone and Black- 
Berry. The unsettling feelings continued 
after comments from investor Fred Wil- 
son that Twitter should be creating its 
own apps in categories initially created 
by third-party developers. 

But at Twitter's Chirp conference in 
San Francisco last month, the company's 
director of platforms, Ryan Sarver, tried 
to ease some worries. "Twitter is the way 
it is because of the ecosystem. There is 
no way we can be successful without you 
guys," he said. 

Sarver then went on to discuss future 
features and projects, one being potential- 
ly useful to developers: annotations. This 
functionality will enable developers to add 
any type of metadata to a tweet. Although 
it's exciting to think about what products 
and features can come from this, it can 
also potentially lead to a mess if one app 
can't interpret another's metadata. 

— Katie Serignese 

IT'S DISAPPOINTING WHEN stan- 
dards are left to go stale. Such is the case 
with DLNA (Digital Living Network 
Alliance), a specification that is designed 
to network entertainment devices 
together. 

My new Samsung LCD television 
comes with DLNA client software. 
There are a number of DLNA media 
servers available, but none of them fully 
interoperate with my TV. Throw in 
DRM and the latency added by a wire- 
less home network, and you get a terri- 
ble user experience. 

More interoperability testing would 
iron out some of the wrinkles, but it does 
not seem that device makers are in any 
hurry to improve DLNA. The trend has 



become to preload 'widgets' on devices, 
which connect directly to media services 
on the Web. Those don't work so well 
either. 

The plumbing is there, but no device 
maker has offered a compelling solution 
as of yet. Set-top boxes shouldn't be nec- 
essary. I'm reminded of the pre-Apple 
smartphone market. 

— David Worthington 

ONE OF THE UNINTENDED RESULTS 

of a generation of children raised on 8- 
bit video games has been the rather 
shocking rise of chiptune as a musical 
genre. I was watching the British show 
"Skins," and this fact was brought to my 
attention during one particularly emo- 
tional scene. 

With the main characters in a night 
club, the typical TV show band cameo 
took place. But this time it was different: 
The band in question was the Crystal 
Castles, a chiptune band that backs most 
of their songs with roughly cut, cheap 
synthesizer music and low-tech filtered 
voices. 

It was an inter- 
-^jiipp esting moment for 
* me. I liked the 
music, and sud- 
denly I realized 
that the music I loved so much from C64 
and Nintendo games back in the 1980s 
has now become an influential force in 
the almost-mainstream music world. 
After all, 50 Cent did do a song where he 
sampled from a C64 already. 

I guess what excites me the most is 
that we, as a species, are not throwing 30 
years worth of computer history out just 
because our chips have gotten faster. It's 
nice to see old technology still alive in 
the world of art. 

— Alex Handy 



Obsoletion, failure to meet DATA WATCH I 

requirements lead to application retirement 

A Forrester survey of 206 IT decision makers reveals that 53% of respondents are com- 
pelled to retire applications due to their use of obsolete technology. In contrast, costs 
(both maintenance and vendor-related) were not cited as major reasons for preventing 
applications from being replaced. 
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Assembly required 



Not all that long ago, every PC pro- 
grammer was familiar with at least 
the rudiments of the internals of the 
8086, the BIOS and assembly language 
programming. To do any kind of graphi- 
cal work, you needed to change video 
modes, and Terminate-And-Stay-Resi- 
dent programs powered by Interrupt 
27H were a playground for utility pro- 
grammers. 

Two of the better books on assembly 
language programming have recently 
been updated and make it an excellent 
time to learn (or refresh your familiarity 
with) the low-level truth of computing. 
Both Jeff Duntemann's "Assembly Lan- 
guage Step-by- Step" (Wiley) and Ran- 
dall Hyde's "The Art of Assembly Lan- 
guage" (No Starch Press) are thick books 
that cover the 8086 instruction set from 
AAA to XOR. More importantly, though, 
both are excellent tutorials that require 
very little prior knowledge of memory 
models, addressing or bit-twiddling. 

The books are very different in style, 
and determining which one is better 
largely depends on whether you appre- 
ciate the breezy style of Duntemann or 
Hyde's dryer approach. Duntemann's 
tone has the "Hey, kids! Let's build an 
oscilloscope!" confidence of a ham radio 
enthusiast, with lots of authorial pres- 



ence. Hyde's book has a far more bread- 
and-butter approach that allows more 
topics to be treated deeply. (He has a 
whole section on floating point arith- 
metic, for instance.) 

Duntemann's style is very easy to read 
but can invite contradiction. For instance: 
"Assembly language programming is 
about memory addressing." 
One could also say that it's 
about "register allocation" or 
"the universality of binary rep- 
resentation." But if you trust 
Jeff (and you should), you'll 
find him a very able guide. 

Despite the dry tone, Hyde 
takes a radical approach to 
teaching assembly language, 
which is that he doesn't actual- 
ly teach it. His book is really 
about programming in "High-Level 
Assembly" (HLA), a programming lan- 
guage with a somewhat Pascal-like syn- 
tax, control structures and a standard 
library. The concept is that HLA is a scaf- 
folding that allows one to quickly, for 
instance, get "Hello, World!" onto the 
screen but that, over time, one learns to 
do without HLAs help. If you want to do 
crazy jumps that bypass normal control 
structures and calling conventions 
(which, after all, is half the fun of assem- 
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bly language), you can do them, but if 
you like the explicitness of a while loop, 
you can use that, too. 

In truth, HLA is probably one of the 
smarter ways to work with assembly 
language. Assembly language is most 
practical in specific subroutines. With 
HLA, one could mock out the data and 
calling structures and then 
concentrate on the special- 
ized behavior. HLA is certain- 
ly easier to read and write 
than inline assembly in a C 
program. Regrettably, Hyde 
doesn't really discuss integra- 
tion with other languages, 
while Duntemann justifiably 
devotes an entire chapter to 
interfacing with C. 

Both books start by intro- 
ducing basic binary representation and 
memory layout before descending into 
the weeds. Duntemann does a better job 
describing the variety of memory modes 
available to descendants of the 8086, 
which is perhaps not surprising given his 
position on memory addressing. Both 
books also have extensive discussion of 
integer representations and strings. 

Hyde's book goes deeper into arith- 
metic and higher-level programming con- 
cerns such as functions and modules, 
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while Duntemann's provides clearer guid- 
ance on an example-by-example basis. 

Although I agree with the decision of 
both books to explain fundamentals, the 
necessary result is that they simply don't 
have the space to explore that level of 
performance programming where one 
can still potentially outperform modern 
compilers. Neither emphasizes data- 
parallel techniques using single-instruc- 
tion, multiple-data instructions and 
GPU shaders, or multicore processing or 
even cache coherence. If you aren't 
going to at least take a run at the high- 
end capabilities of desktop CPUs, I won- 
der if an approach based on a simpler 
microcontroller might be even more 
approachable; on the other hand, no 
additional purchases or soldering are 
necessary to work through these books. 

Personally, I like Duntemann's tone 
and would be more likely to recommend 
his book to a new programmer. However, 
the previous edition of Hyde's book has 
been my go-to book for assembly lan- 
guage for years, and there's little doubt 
this edition will be similarly long-lived. 

I do wish that there were a perfor- 
mance-oriented text to take the place of 
Michael Abrash's classic but obsolete 
books. I wonder if Duntemann could be 
convinced to write it using Hyde's HLA? I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 
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Where will that big data go? 



While the era of parallel computing 
has been coming our way slowly, 
the era of big data has arrived suddenly. 
We knew it would come eventually. The 
convergence of scads of real-time data 
(GPS, RFID, audio, video) with data 
extracted from the Web, combined with 
incredibly inexpensive storage capacity, 
has led to vast amounts of data sitting on 
systems waiting to be processed. As this 
surge of data has crested, software tech- 
nologies to process it efficiently have 
emerged. Some of these are entirely 
new (map/reduce), while others expand 
tools and techniques that were previous- 
ly known but had garnered less attention 
(dataflow, non-SQL databases, etc.). 

However, these data-handling tools 
face a rather under-discussed problem: 
efficient data movement. Suppose you 
have 2TB of unstructured data to 
process. Given plenty of processing 
horsepower, what are the bottlenecks 
you'll face? Chances are that processing 
might be a minor gating factor, but I sus- 
pect it won't be nearly as much of an 
obstacle as I/O latency. 

Moving 2TB of data takes a long time. 
The two primary components — disk 
access speed and network bandwidth — 
work against throughput in compelling 
ways. Their limitations derive from the 



fact that I/O systems simply cannot stay 
even with the growth in data loads. 

If I/O is the gating factor, what is the 
solution? In simple terms, it is moving the 
computation to the data, rather than the 
traditional path of moving the data to the 
computation engine. This concept, which 
is analogous to stored procedures run- 
ning on the database server, takes a dif- 
ferent form when processing 
unstructured data. 

One implementation is to 
use virtualization and move 
the VM to the data. This 
approach has benefits — VMs 
are much smaller than the 
blobs of data we're dis- 
cussing — and drawbacks. The 
principal limitation is that this 
model moves data off a storage 
fabric and onto the machines 
that perform computing. Clusters with 
data resident on nodes, for example, is a 
model that does not currently have wide 
usage. But, it may soon be the preferred 
way of handling large data. 

One feature this model needs is a new 
filesystem. Filesystems will now need to 
be able to communicate not only the path 
to the data, but where exactly it is located. 
In a very direct way, this violates the goal 
of virtualization, which aims to break the 
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physical/virtual linkage. In fact, such 
future filesystems will need to know 
where exactly they are located and be able 
to announce the physical system's location 
as part of the file's URI or designation. 

Such a filesystem is still a topic of 
research, but it is not a pie-in-the-sky pro- 
ject. It is very much a response to present 
or soon-to-be present challenges for IT 
organizations. Racing to solve 
the problem is akin to finding a 
vaccine to thwart a flu epidem- 
ic. If the solution is not found, 
the problem is inevitable. 

Returning to the question 
of putting data on computing 
servers, there are other prob- 
lems that result from this 
design — problems that them- 
selves are research topics. The 
first of these is power con- 
sumption. Nodes that hold data that could 
be of use to other nodes cannot be shut 
down to save power. Hence, such clusters 
cannot adopt one of the emerging best 
practices in power reduction, which is to 
shut down unused or little-needed nodes 
when cluster loads are light. 

One possible solution is simple plan- 
ning. 2TB data blobs are rarely processed 
in their entirety at unscheduled, unex- 
pected moments. These are jobs that can 



be scheduled and run in batch mode, so 
that the appropriate resources can be 
made available at the pre-set time. 

That's fine for batch computing, but it 
doesn't work as well for streaming data 
applications. These apps typically are 
unscheduled and require low latency and 
fast access. For these apps, there is as yet 
no magical solution to the I/O problem. 

Fortunately, if streaming data apps 
are constrained today, it's primarily at 
the processing, not the I/O levels. And 
for them, the parallel capabilities of 
processors comes just in time. Long 
term, we may well have to rethink algo- 
rithms in light of the performance needs 
of big data. 

For the moment, we can duck the 
issues presented here. Multicore CPUs, 
lOGbE adapters, and SSDs are all help- 
ing to accelerate processing and diminish 
I/O overhead of these kinds of applica- 
tions. However, it's clear we are living on 
borrowed time. The amount of data is 
growing faster than I/O bandwidth and 
faster than our research capabilities. 
There is no doubt that successful data 
processing in the near future will depend 
on new forms of intelligent planning and 
design for big data apps, not only at the 
processing level, but also in architecture 
of physical and virtual solutions. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Ads in the apps? Love them-if the apps are free 



Free mobile applications are great. If 
those free apps are supported by 
advertising, that's a trade-off that I'm 
willing to make, and I suspect many 
users that would agree with me. 

Our feelings about advertising in 
software have changed. While we don't 
expect our desktop software to contain 
ads (sorry, no pop-ups when using Excel 
or Photoshop, please), every- 
one accepts that websites are 
supported by ads. That's true of 
everything from blogs and ref- 
erence sites to NYTimes.com 
and SDTimes.com. 

Mobile apps — pioneered on 
Apple's iPhone, but spreading 
like wildfire to other platforms, 
like Google's Android and 
Microsoft's Windows Phone 
7 — are more akin to websites than desk- 
top software. 

Consider: You might not install a 
Yelp or OpenTable application on your 
Linux, Mac or Windows notebook to 
help you find a restaurant or reserve a 
table. Instead, you expect to use its 
websites for that purpose: getting a free 
service in exchange for seeing some 
possibly relevant advertising. On your 
smartphone, instead of browsing to 
yelp.com or opentable.com, the natural 
tendency is to install a Yelp or 
OpenTable app, and both of those exist. 
If they showed ads, would you mind? 
Probably not. 

This is a huge change of mindset. Ten 
years ago, in the very first issue of SD 
Times (Feb. 23, 2000), we published a 
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story about an ad-supported software 
business model. We weren't very happy 
about this. An editorial in that issue, 
entitled "It's an Ad, Ad, Ad, Ad World," 
said: 

It s had enough seeing advertisements 
on Weh pages. But ads in your applica- 
tions software? The latest trend is to 
embed advertising links into client appli- 
cations using tools from up- 
and-coming companies like 
Aureate Media Corp. or Con- 
ducent Technologies Inc. 

On one hand, that's good 
news: Vendors are developing 
alternative revenue streams, 
which might allow them to 
offer full-featured applications 
for free or for reduced cost. 
But the bad news is: Your 
employees are trying to do a job. To pro- 
tect them, your company doubtlessly 
stops salespeople at the door and won't 
allow them to canvass your busy 
employees while they're working. 
Should embedded advertisers be afford- 




ed special privileges and 24x7 access to 
your staff? Of course not. 

If you're developing consumer appli- 
cations, embedded advertising for your 
freely distributed software is a good 
idea, and can provide a valuable source 
of additional revenue for hot products. 
But please don't inflict ads on your 
enterprise customers because, frankly, 
they won't stand for it. Would you? 

Yes, the world has changed. Ads 
embedded into mobile apps aren't only 
tolerated, but are embraced as a legiti- 
mate business model. In fact, Google 
is buying AdMob, a company that 
helps developers embed and sell ads in 
their mobile apps, and Apple has 
announced its own ad delivery system, 
called iAd. 

Just don't make the mistake of 
charging for an app... and then embed- 
ding ads anyway. Cable News Network 
has committed this faux pas with its 
US$1.99 CNN Mobile app, and the 
feedback is scathing. Here are the 
titles of the three more recent cus- 
tomer comments: 

DO NOT BUY THIS APP! It's full of 
advertisements! 

Ads (!) -In a paid app - a ripoff! 

Slow, littered with ads! 

From websites to mobile apps, it's an 
ad, ad, ad, ad world. But I guess we're 
used to it. I 

Alan Zeichick is editorial director of 
SD Times. Follow him on Twitter at 
twitter.com/zeichick. Read his blog at 
ztrek. blogspot. com. 
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HP has announced it will acquire erstwhile handheld device 
maker Palm, Inc. for US$1.2 billion. Under the deal, approved 
by both companies' boards of directors, HP will pay US$5.70 
per share, which is almost double the trading price. Palm 
makes smartphones that run the Palm webOS mobile operat- 
ing system, which will allow HP to provide true multitasking 
and information sharing across platforms. The deal is expect- 
ed to close during HP's third quarter, which ends July 31 
. . . IBM's smarter transportation work with Russian Railways 
has been cited by technology business magazine IEEE Spec- 
trum as a project having the most potential benefit to mankind. 
For its work to overhaul the railroad's software infrastructure, 
IBM was awarded the 2010 IEEE Spectrum ACE Award for 
Technology in the Service of Society. Russian Railways handles 
almost 80% of all transportation in Russia and serves 1.3 bil- 
lion passengers and tons of freight. "We are seeing a renais- 
sance in rail with the advent of new smarter techniques and 
technologies," said Keith Dierkx, director of IBM's Global Rail 
Innovation Center, in a statement acknowledging the award. 
"Analytics and sensors are transforming rail systems around 
the world to be faster, greener and safer. Rail passengers are 
benefiting from more reliable and seamless travel as well as 
real-time data on train schedules, while freight operators can 



deliver goods with even greater economic efficiencies." . . . 
Microsoft has signed HTC Corp. to a patent agreement that 
will allow HTC's mobile phones to run the Android platform. 
Under the terms of the agreement, Microsoft will receive roy- 
alties from HTC, with which Microsoft has had a long business 
relationship. Microsoft has entered into more than 600 licens- 
ing agreements since it launched its IP program in late 2003. 

EARNINGS: Ness Technologies, which offers global software 
development services, reported quarterly revenues grew 6% 
for its fiscal quarter ended March 31 from the same period a 
year earlier. Revenues were US$133.3 million, while GAAP net 
income was $700,000, down 72% from the previous year's 
quarter. With its earnings statement, the company also 
announced it was acquiring Gilon Business Insight Ltd., an 
Israel-based business intelligence services company, for an 
undisclosed amount. That deal is expected to close during the 
second quarter. Ness had announced it would cut non-strategic 
or unprofitable smaller operations, and in line with that, will sell 
its software distribution operations in Europe and its Asia 
Pacific system integration and application development opera- 
tions. All of those sales are expected to close in the second 
quarter. I 



events Calendar 



Sapphire NOW 

Orlando 
SAP 

www.sap.com/about/events/sapphire 



May 16-19 



CA World 


May 16-20 


Las Vegas 




CA 




www.ca.com/caworld 




SATURN 2010: 


May 17-21 


Engineering for Change 




Minneapolis 




CARNEGIE MELLON SEI 




www.sei.cmu.edu/saturn/2010 




Google I/O 


May 19-20 


San Francisco 




GOOGLE 




code.google.com/events/io/2010 




Innovate 2010 


June 6-10 


Orlando 




IBM 




www-01.ibm.com/software/rational/innovate 


RailsConf 


June 7-10 


Baltimore 




O'REILLY MEDIA 




en.oreilly.com/rails2010 




Microsoft TechEd 


June 7-10 
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Chicago 
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June 21-24 


Las Vegas 
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June 22-24 


Santa Clara 
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Red Had Summit 


June 22-25 


SJBoss World 




Boston 




RED HAT 




www.redhat.com/promo/summit/2010 




Open Source 


June 23 


Software Symposium 




Minneapolis 
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Boston 
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For a more complete calendar of U.S. software 
development events, see www.sdtimes.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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